skills/vm0-ai/vm0-skills/onyx/Gen Agent Trust Hub

onyx

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to interact with API endpoints and jq to process JSON responses.
  • [EXTERNAL_DOWNLOADS]: The skill connects to cloud.onyx.app to perform knowledge base operations, which is the official domain for the Onyx service.
  • [CREDENTIALS_UNSAFE]: Authentication is managed via the $ONYX_TOKEN environment variable, avoiding the use of hardcoded secrets.
  • [DATA_EXFILTRATION]: User queries and document content are transmitted to the Onyx API as part of the skill's core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 01:52 AM
Security Audit — agent-trust-hub — onyx